26 matches found
missing-cve-nuclei-templates
nuclei 템플릿 공식 저장소에서 누락된 CVE의 주간 업데이트 목록 참고 이 저장소는 100% 자동화되어 있으므로 오류가 있을 수 있지만, 일반적으로는 상당히 정확합니다. 데이터가 어떻게 수집되는지 이해하려면 "작동 방식" 섹션을 참고하세요. 통계 📊 분석된 CVE : 174067 누락된 CVE : 68723 취약점 유형별 드롭다운 : 유형| 개수| 데이터 ---|---|--- XSS| 23811| xss.txt RCE| 3669| rce.txt SQL Injection| 13683| sqli.txt Local File...
Gitea-Forgejo-CVE-2025-68937
Уязвимость произвольного расширения шаблонов в Gitea и Forgejo Эта работа лицензирована в соответствии с Creative Commons Attribution-ShareAlike 4.0 International License. Краткое описание Проверяя исходный код Forgejo и Gitea, чтобы лучше понять, как выполняется шаблонизация, я обнаружил...
nuclei_template
이 저장소에는 README가 없습니다...
CVE-2026-89094
Forgejo before 16.0.4 allows remote code execution via a crafted template repository because template expansion on files in .forgejo/template is mishandled...
CVE-2026-89094
Forgejo versions prior to 16.0.4 are vulnerable to remote code execution (RCE) when a user creates a crafted template repository. The root cause is mishandled template expansion on files located in the .forgejo/template directory, which allows an attacker with low privileges to achieve code execu...
EUVD-2026-75732
Forgejo before 16.0.4 allows remote code execution via a crafted template repository because template expansion on files in .forgejo/template is mishandled...
CVE-2026-89094
Forgejo before 16.0.4 allows remote code execution via a crafted template repository because template expansion on files in .forgejo/template is mishandled...
PT-2026-89589
Name of the Vulnerable Software and Affected Versions Forgejo versions prior to 16.0.4 Description Remote code execution is possible through the use of a crafted template repository. This occurs because the software mishandles template expansion on files located within the .forgejo/template...
CVE-2026-89094: Improper Neutralization of Special Elements Used in a Template Engine
Forgejo before 16.0.4 allows remote code execution via a crafted template repository because template expansion on files in .forgejo/template is mishandled...
SUSE CVE-2026-25718
Gitea versions before 1.25.5 mishandle path resolution during template repository generation, allowing template processing to read or write through symlinked or otherwise non-regular paths...
GO-2026-6340 Gitea template repository generation follows unsafe filesystem paths in code.gitea.io/gitea
Gitea template repository generation follows unsafe filesystem paths in code.gitea.io/gitea...
Symlink Attack
Overview gitea.dev/modules/util is a Git with a cup of tea, painless self-hosted git service. Affected versions of this package are vulnerable to Symlink Attack in the template repository generation process. An attacker can access or modify files outside the intended directory by leveraging...
Symlink Attack
Overview Affected versions of this package are vulnerable to Symlink Attack in the template repository generation process. An attacker can access or modify files outside the intended directory by leveraging symlinked or non-regular paths. Remediation Upgrade...
Symlink Attack
Overview Affected versions of this package are vulnerable to Symlink Attack in the template repository generation process. An attacker can access or modify files outside the intended directory by leveraging symlinked or non-regular paths. Remediation Upgrade gitea.dev/services/repository to versi...
Gitea template repository generation follows unsafe filesystem paths
Gitea versions before 1.25.5 mishandle path resolution during template repository generation, allowing template processing to read or write through symlinked or otherwise non-regular paths...
CVE-2026-25718 Gitea template repository generation mishandles symlinked paths
Gitea versions before 1.25.5 mishandle path resolution during template repository generation, allowing template processing to read or write through symlinked or otherwise non-regular paths...
CVE-2026-25718 Gitea template repository generation mishandles symlinked paths
Gitea versions before 1.25.5 mishandle path resolution during template repository generation, allowing template processing to read or write through symlinked or otherwise non-regular paths...
EUVD-2026-41624
Gitea versions before 1.25.5 mishandle path resolution during template repository generation, allowing template processing to read or write through symlinked or otherwise non-regular paths...
CVE-2026-25718 Gitea template repository generation mishandles symlinked paths
Gitea versions before 1.25.5 mishandle path resolution during template repository generation, allowing template processing to read or write through symlinked or otherwise non-regular paths...
CVE-2026-25718
Gitea versions before 1.25.5 are vulnerable to a Symlink Attack due to improper path resolution during template repository generation. This flaw allows an attacker to read or write files outside the intended directory by leveraging symlinked or non-regular paths . Affected components include gite...